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CLAIMS 

What is claimed is: 

1 l. A method comprising: 

2 receiving a request to prove that a platform possesses 

3 cryptographic information from a certifying manufacturer; and 

4 performing a direct proof by the platform to prove that the 

5 platform possesses the cryptographic information, the direct 

6 proof comprises a plurality of exponentiations each being 

7 conducted using an exponent having a bit length no more than 

8 one-half a bit length of a modulus (n) . 

1 2. The method of claim 1, wherein the bit length of the 

2 exponent being at most 160 bits in length. 

1 3. The method of claim 1, wherein the modulus (n) being over 

2 1000 bits in length. 

1 4. The method of claim 1, wherein the bit length of the 

2 exponent being a constant value despite any increase in value of 

3 the modulus (n) . 

1 5. The method of claim 1, wherein the bit length of the 

2 exponent being less than one -eighth the bit length of the 

3 modulus (n) . 

1 6. The method of claim 1, wherein the plurality of 

2 exponentiations conducted are of the form h c mod P, where "h" is 

3 a unique number, "t" is randomly chosen between an interval 

4 between 0 and W, "P" is a large prime number, and W is a number 

5 between 2 80 and the square root of n. 
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1 7. A method comprising: 

2 receiving a request to prove that a platform possesses 

3 cryptographic information from a certifying manufacturer; and 

4 performing a direct proof by the platform to prove that th. 

5 platform possesses the cryptographic information, the direct 

6 proof comprises a plurality of exponentiations each being 

7 conducted using an exponent remaining constant despite an 

8 increase in a bit length of a modulus (n) . 

1 8. The method of claim 7, wherein the bit length of the 

2 exponent being less than one-sixth of the bit length of the 

3 modulus (n) . 

1 9. The method of claim 7, wherein the bit length of the 

2 exponent being at most 160 bits in length. 

1 10. The method of claim 9, wherein the modulus (n) being over 

2 1000 bits in length. 

1 11. The method of claim 7, wherein each of the plurality of 

2 exponentiations conducted are of the form h fc mod P, where «h« i 

3 a unique number, »t" is randomly chosen between an interval 

4 between 0 and W, "P" is a large prime number, and W is a numbe: 

5 between 2 80 and the square root of n. 

1 12. The method of claim 11, wherein the value "t" is of a for, 

2 y e mod n, where «e" is a public exponent and "y" is either a 

3 random or pseudo- randomly chosen number within an interval 

4 ranging from 0 to n. 
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1 13. A method comprising: 

2 receiving a request for information by a cryptographic 

3 device ; and 

4 proving in a single direct proof that a value was signed by 

5 a signature key without revealing the value, the single direct 

6 proof comprises a plurality of exponentiations of which all of 

7 the plurality of exponentiations are conducted using a fixed 

8 exponent substantially less in bit length than a bit length of a 

9 modulus (n) . 

1 14. The method of claim 13, wherein the bit length of the 

2 exponent being at most 160 bits in length. 

1 15. The method of claim 14, wherein the modulus (n) is over 

2 1000 bits in length. 

1 16. The method of claim 13, wherein the bit length of the fixed 

2 exponents associated with the exponentiations are a constant 

3 value despite any increase in value of the modulus (n) . 

1 17. A platform comprising: 

2 a bus; 

3 a network interface card coupled to the bus; and 

4 a processor coupled to the bus; and 

5 a trusted platform module coupled to the processor, in 

6 response to a challenge received over the network interface 

7 card, the trusted platform module to perform a direct proof in 

8 order to prove that the trusted platform module has a digital 

9 signature from a device manufacturer and the digital signature 

10 is valid without revealing the digital signature, the direct 

11 proof comprises a plurality of exponentiations each being 
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conducted using an exponent having a bit length no more than 
one-half a bit length of a modulus (n) . 



18. The platform of claim 17, wherein the direct proof 
performed by the trusted platform module is conducted with the 
bit length of each exponent associated with all of the plurality 
of exponentiations being at most 160 bits in length. 

19. The platform of claim 17, wherein the direct proof 
performed by the trusted platform module is conducted with the 
bit length of each exponent associated with all of the plurality 
of exponentiations being a constant value despite any increase 
in value of the modulus (n) . 



